Bug#722611: mutt: segfaults when sending with SMTP

[Matteo Cypriani]

Hi there,

On Wed, 11 Jun 2014 16:56:07 -0400, Matteo Cypriani <mcy at lm7.fr> wrote:
> After all it *looks* indeed like it's a bug in libsasl. The bug occurs
> when trying to send an email with mutt via SMTP and the DIGEST-MD5
> authentication, because free_rc4() (from plugins/digestmd5.c) is called
> twice: once when mutt calls sasl_client_step(), and once when it calls
> sasl_dispose(). I'm attaching a file with the most important steps of my
> gdb session (this time I rebuilt mutt and libsasl with nostrip to have
> all the symbols).
> 
> I'm also attaching a patch that fixes the problem for me, but please don't
> blindly apply it: I really don't know what I'm doing! Maybe the pointers
> should be set to NULL elsewhere, or maybe free_rc4() shouldn't be called
> twice in the first place, I'm not familiar enough with the code to tell.

Did anybody have time to look into this? I would very much like to see this
problem fixed in jessie. I think it would be possible to obtain an unblock
exception if the upload is prepared soon.

Cheers,
  Matteo
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-cyrus-sasl2-debian-devel/attachments/20141124/19451a3d/attachment.sig>